Top 10 web hacking techniques of 2023 - nominations open
Summary: PortSwigger Research has opened nominations for its annual community-voted top 10 web hacking techniques, a project running since 2006, with submissions accepted as a URL plus an optional comment on what is novel. Organizers say they will filter out nominations that are non-web focused, just tools, or not clearly innovative, and the aim is to highlight novel, practical techniques that can be reapplied to different systems rather than individual vulnerabilities like log4shell.
Key Takeaway: The project's stated criterion is reusability: underlying techniques such as JNDI Injection outlast single vulnerabilities, so the community's shortlist is effectively a forecast of what attackers will adapt and combine against your systems next.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026